Vulnerabilities > CVE-2021-26393 - Memory Leak vulnerability in AMD products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
amd
CWE-401

Summary

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

Vulnerable Configurations

Part Description Count
Application
Amd
8
Hardware
Amd
113
OS
Amd
64